This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json) Hash identifier: chZlhqiqxoU/MYRdL7sGizMuSCyDqSDbeIEr5dHKg5A= Subject key identifier: 31:46:8D:74:A3:2D:B9:42:3A:7B:45:40:49:E2:B9:91:CB:32:E1:99 Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Certificate serial: 019AF27728C13117859AEE7EA4F1D73A697F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: QghKLCdQYJ+vtvmTypZe4sUknoli9/XpfXmRewk07rw=) 2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:28:c1:31:17:85:9a:ee:7e:a4:f1:d7:3a:69:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=31468d74a32db9423a7b454049e2b991cb32e199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:74:73:ca:34:84:56:6a:c3:33:94:9c:5a: a0:ce:c2:04:63:9c:3e:1d:89:3f:b9:e8:ef:e5:62: 27:15:d3:26:ec:6b:42:a6:f3:3e:b6:c7:34:3e:93: 91:ab:84:ce:75:8f:dc:0d:71:2c:8a:ff:a8:60:7f: 04:71:66:4d:17:40:6c:9b:01:fd:d9:35:6a:a1:db: 9e:be:92:43:ae:a3:e3:f4:7d:e2:db:13:ae:7b:2f: e4:2f:84:b0:03:09:f7:d1:12:35:a5:7b:5a:9d:86: 39:a3:cb:29:66:1b:83:06:d9:c0:15:fc:f5:8e:9c: 92:5e:79:7e:7f:eb:0e:79:91:e0:de:ba:20:b1:da: 40:c0:5b:56:5c:46:25:67:b5:0e:9f:15:83:50:cb: c0:43:c5:c4:c4:f7:de:ce:ff:a4:45:e9:ef:55:3e: 1c:77:1f:97:0c:d5:d2:2c:3f:90:f0:e1:6d:54:6d: 1c:19:25:5a:6a:82:47:38:84:f8:a2:4a:b1:cd:9d: df:4d:e3:df:c0:27:d5:5c:0e:61:18:c5:a2:65:14: 7d:ba:bf:44:b5:c8:96:f5:0a:21:07:cf:4d:52:58: 15:1b:2f:a5:4e:fb:13:5e:61:dd:a5:ad:bc:b0:62: 1c:37:41:0e:cd:34:ff:2e:ac:a4:33:e8:d2:23:16: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:8D:74:A3:2D:B9:42:3A:7B:45:40:49:E2:B9:91:CB:32:E1:99 X509v3 Authority Key Identifier: keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:08:da:01:79:24:26:14:c9:b4:75:6a:59:61:72:92:95: 58:3c:7d:2d:31:cd:3e:43:74:00:34:a4:ea:53:52:a1:ac:1c: 5b:42:52:51:73:f2:de:61:ee:da:bb:76:cd:8d:4e:69:13:eb: 3f:c5:15:3e:2d:c6:9c:f1:63:25:a4:4d:a1:ca:86:e7:5d:96: 25:34:ee:0b:6e:93:d2:32:f2:6d:a7:c5:52:2b:7a:d0:b7:8b: 32:43:8c:00:e0:e7:e4:2e:ad:36:90:97:bf:68:31:0e:18:4d: a5:c4:61:ca:52:de:e8:26:b1:4d:40:62:6c:15:6a:1b:f9:20: 4d:7b:0e:2e:b9:4a:6b:88:5a:b3:35:9d:9a:32:7f:81:13:f0: e9:5f:de:f4:56:ff:7a:ce:24:eb:ad:87:14:b2:de:35:d3:3b: be:cf:e2:ca:a4:76:01:52:d9:17:5a:9f:53:3c:4d:56:31:75: 33:cb:9e:19:0c:d4:cf:a4:cf:75:a3:ad:05:3e:d3:f1:8c:ad: b4:fd:c3:b8:e1:38:8b:28:38:32:69:b8:a3:b8:1e:9d:aa:cb: 6a:5a:4f:d4:d2:5b:87:f6:0a:e8:e0:15:a3:35:c4:8e:80:59: 46:4c:93:ad:e6:48:2c:34:04:05:4f:c7:4d:c7:f2:3f:7a:f6: 06:14:dd:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyjBMReFmu5+pPHXOml/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl MjEwM2MwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EygzMTQ2OGQ3NGEzMmRiOTQyM2E3YjQ1NDA0OWUyYjk5MWNiMzJlMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIR0c8o0hFZqwzOUnFqgzsIEY5w+ HYk/uejv5WInFdMm7GtCpvM+tsc0PpORq4TOdY/cDXEsiv+oYH8EcWZNF0BsmwH9 2TVqoduevpJDrqPj9H3i2xOuey/kL4SwAwn30RI1pXtanYY5o8spZhuDBtnAFfz1 jpySXnl+f+sOeZHg3rogsdpAwFtWXEYlZ7UOnxWDUMvAQ8XExPfezv+kRenvVT4c dx+XDNXSLD+Q8OFtVG0cGSVaaoJHOIT4okqxzZ3fTePfwCfVXA5hGMWiZRR9ur9E tciW9QohB89NUlgVGy+lTvsTXmHdpa28sGIcN0EOzTT/LqykM+jSIxYrrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFGjXSjLblCOntFQEniuZHLMuGZMB8GA1UdIwQY MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq0I2gF5 JCYUybR1allhcpKVWDx9LTHNPkN0ADSk6lNSoawcW0JSUXPy3mHu2rt2zY1OaRPr P8UVPi3GnPFjJaRNocqG512WJTTuC26T0jLybafFUit60LeLMkOMAODn5C6tNpCX v2gxDhhNpcRhylLe6CaxTUBibBVqG/kgTXsOLrlKa4haszWdmjJ/gRPw6V/e9Fb/ es4k662HFLLeNdM7vs/iyqR2AVLZF1qfUzxNVjF1M8ueGQzUz6TPdaOtBT7T8Yyt tP3DuOE4iyg4Mmm4o7genarLalpP1NJbh/YK6OAVozXEjoBZRkyTreZILDQEBU/H TcfyP3r2BhTdqw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:19 2025 by rpki-client